Explore DevSecOps principles for cloud security in this 50-minute conference talk from RSA Conference. Learn how to build self-healing architectures that identify and auto-remediate security misconfigurations in real-time across multiple cloud environments. Discover the Dow Jones Hammer tool and its capabilities in enabling secure cloud adoption. Gain insights into implementing security from the start, addressing vulnerabilities, and scaling with automation using open-source technologies. Examine case studies on protecting against bitcoin miners and over-exposed instances. Understand key trends in cloud security and learn about Project Braavos, a continuous security pipeline solution. Suitable for those with knowledge of AWS cloud, programming languages, APIs, serverless lambda, and databases.
Overview
Syllabus
Intro
What are we going to talk about...?
Quick Flashback....
Challenges
Traditional Security - Old School
Setting priorities right...
Think about....
Security as a Service
DevSecOps pipeline
RSAConference 2019
Hammer... why?
Consumer
Multi-account sprawl
Multi-account growth : Ideal State
Hammer: What Does it Solve?
Hammer Lifecycle
Architecture
Hammer - how does it work?
Hammer-/auto-fix
Hammer : Service Matrix
Roadmap
Case Study 1: Protection from bitcoin miners.....
Case Study 1: Example
Case Study 2: Over Exposed Instances
Key Trends....
Implement Cloud Security : Day 1
Project Braavos
DevSecOps - reference tools
Our Solution : project bravos
continuous_security: Jenkins Pipeline Stage View
Dynamic Scanning in Pipeline
Lessons Learnt
Breaking the build : Myth?
Thank you
Taught by
RSA Conference
